CVE-2016-3370 — Sensitive Information Exposure in Microsoft Windows 10

CWE-200 — Sensitive Information Exposure6 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
15.5%
top 5.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
19
Microsoft Windows 10Microsoft Windows Server 2012Msrc Microsoft Edge ON Windows 10 FOR 32-bit Systems+16 more
Timeline
PublishedSep 14
Latest updateMay 14

Description

The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3374.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages19 packages

🔴Vulnerability Details

2
GHSA
GHSA-9gvh-7r9h-q29p: The PDF library in Microsoft Edge, Windows 8↗2022-05-14
▶
GHSA
GHSA-69v5-jqwj-h2vx: The PDF library in Microsoft Edge, Windows 8↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Browser Information Disclosure Vulnerability↗2016-09-13
▶

🕵️Threat Intelligence

1
Zscaler
Zscaler found Multiple Security Vulnerabilities | 09-13-2016↗
▶